Authentication with physical unclonable functions
    1.
    发明授权
    Authentication with physical unclonable functions 有权
    使用物理不可克隆功能进行身份验证

    公开(公告)号:US08782396B2

    公开(公告)日:2014-07-15

    申请号:US12234095

    申请日:2008-09-19

    IPC分类号: H04L9/32

    摘要: Physical Unclonable Functions (PUFs) for authentication can be implemented in a variety of electronic devices including FPGAs, RFIDs, and ASICs. In some implementations, challenge-response pairs corresponding to individual PUFs can be enrolled and used to determine authentication data, which may be managed in a database. Later when a target object with a PUF is intended to be authenticated a set (or subset) of challenges are applied to each PUF device to authenticate it and thus distinguish it from others. In some examples, authentication is achieved without requiring complex cryptography circuitry implemented on the device. Furthermore, an authentication station does not necessarily have to be in communication with an authority holding the authentication data when a particular device is to be authenticated.

    摘要翻译: 用于认证的物理不可克隆功能(PUF)可以在包括FPGA,RFID和ASIC的各种电子设备中实现。 在一些实现中,对应于各个PUF的挑战 - 响应对可以被注册并用于确定可以在数据库中管理的认证数据。 之后当具有PUF的目标对象旨在被认证时,将对每个PUF设备应用一组(或子集)的挑战来对其进行认证,从而将其与其他人区分开。 在一些示例中,实现认证,而不需要在设备上实现复杂的加密电路。 此外,当特定设备要被认证时,认证站不一定必须与保存认证数据的机构进行通信。

    Securely field configurable device
    4.
    发明申请
    Securely field configurable device 有权
    安全的现场可配置设备

    公开(公告)号:US20060209584A1

    公开(公告)日:2006-09-21

    申请号:US11272995

    申请日:2005-11-14

    IPC分类号: G11C5/00

    摘要: A field configurable device, such as an FPGA, supports secure field configuration without using non-volatile storage for cryptographic keys on the device and without requiring a continuous or ongoing power source to maintain a volatile storage on the device. The approach can be used to secure the configuration data such that it can in general be used on a single or a selected set of devices and/or encryption of the configuration data so that the encrypted configuration data can be exposed without compromising information encoded in the configuration data.

    摘要翻译: 诸如FPGA的现场可配置设备支持安全的现场配置,而不需要在设备上使用非易失性存储器用于加密密钥,而不需要连续或正在进行的电源来维护设备上的易失性存储。 该方法可以用于保护配置数据,使得其通常可以在单个或所选择的设备集合上使用和/或配置数据的加密,使得加密的配置数据可以在不损害在 配置数据。

    AUTHENTICATION WITH PHYSICAL UNCLONABLE FUNCTIONS
    8.
    发明申请
    AUTHENTICATION WITH PHYSICAL UNCLONABLE FUNCTIONS 有权
    与物理不可靠功能的认证

    公开(公告)号:US20090083833A1

    公开(公告)日:2009-03-26

    申请号:US12234095

    申请日:2008-09-19

    IPC分类号: H04L9/32

    摘要: Physical Unclonable Functions (PUFs) for authentication can be implemented in a variety of electronic devices including FPGAs, RFIDs, and ASICs. In some implementations, challenge-response pairs corresponding to individual PUFs can be enrolled and used to determine authentication data, which may be managed in a database. Later when a target object with a PUF is intended to be authenticated a set (or subset) of challenges are applied to each PUF device to authenticate it and thus distinguish it from others. In some examples, authentication is achieved without requiring complex cryptography circuitry implemented on the device. Furthermore, an authentication station does not necessarily have to be in communication with an authority holding the authentication data when a particular device is to be authenticated.

    摘要翻译: 用于认证的物理不可克隆功能(PUF)可以在包括FPGA,RFID和ASIC的各种电子设备中实现。 在一些实现中,对应于各个PUF的挑战 - 响应对可以被注册并用于确定可以在数据库中管理的认证数据。 之后当具有PUF的目标对象旨在被认证时,将对每个PUF设备应用一组(或子集)的挑战来对其进行认证,从而将其与其他人区分开。 在一些示例中,实现认证,而不需要在设备上实现复杂的加密电路。 此外,当特定设备要被认证时,认证站不一定必须与保存认证数据的机构进行通信。

    Method and apparatus for bandwidth guarantee and overload protection in a network switch
    10.
    发明授权
    Method and apparatus for bandwidth guarantee and overload protection in a network switch 有权
    网络交换机带宽保障和过载保护的方法和装置

    公开(公告)号:US07724760B2

    公开(公告)日:2010-05-25

    申请号:US10639269

    申请日:2003-08-12

    IPC分类号: H04L12/56

    摘要: A method for selecting a queue for service across a shared link. The method includes classifying each queue from a group of queues within a plurality of ingresses into one tier of a number “N” of tiers. The number “N” is greater than or equal to 2. Information about allocated bandwidth is used to classify at least some of the queues into the tiers. Each tier is assigned a different priority. The method also includes matching queues to available egresses by matching queues classified within tiers with higher priorities before matching queues classified within tiers with lower priorities.

    摘要翻译: 一种用于通过共享链路选择服务队列的方法。 该方法包括将来自多个入口内的一组队列中的每个队列分成层数“N”的一层。 数字“N”大于或等于2.关于分配的带宽的信息用于将至少一些队列分类到层级中。 每个层都有不同的优先级。 该方法还包括通过匹配在具有较低优先级的层级中分类的队列之前匹配在具有较高优先级的层级中分类的队列来匹配队列到可用出口。